Github-Dorks

GitHub Dork List :

GitHub Dorks for Finding Files

• filename:manifest.xml

• filename:travis.yml

• filename:vim_settings.xml

• filename:database

• filename:prod.exs NOT prod.secret.exs

• filename:prod.secret.exs

• filename:.npmrc _auth

• filename:.dockercfg auth

• filename:WebServers.xml

• filename:.bash_history

• filename:sftp-config.json

• filename:sftp.json path:.vscode

• filename:secrets.yml password

• filename:.esmtprc password

• filename:passwd path:etc

• filename:dbeaver-data-sources.xml

• path:sites databases password

• filename:config.php dbpasswd

• filename:prod.secret.exs

• filename:configuration.php JConfig password

• filename:.sh_history

• shodan_api_key language:python

• filename:shadow path:etc

• JEKYLL_GITHUB_TOKEN

• filename:proftpdpasswd

• filename:.pgpass

• filename:idea14.key

• filename:hub oauth_token

• HEROKU_API_KEY language:json

• HEROKU_API_KEY language:shell

• SF_USERNAME salesforce

• filename:.bash_profile aws

• extension:json api.forecast.io

• filename:.env MAIL_HOST=smtp.gmail.com

• filename:wp-config.php

• extension:sql mysql dump

• filename:credentials aws_access_key_id

• filename:id_rsa or filename:id_dsa

GitHub Dorks for Finding Languages

• language:python username

• language:php username

• language:sql username

• language:html password

• language:perl password

• language:shell username

• language:java api

• HOMEBREW_GITHUB_API_TOKEN language:shell

GiHub Dorks for Finding API Keys, Tokens and Passwords

• api_key

• “api keys”

• authorization_bearer:

• oauth

• auth

• authentication

• client_secret

• api_token:

• “api token”

• client_id

• password

• user_password

• user_pass

• passcode

• client_secret

• secret

• password hash

• OTP

• user auth

GitHub Dorks for Finding Usernames

• user:name (user:admin)

• org:name (org:google type:users)

• in:login ( in:login)

• in:name ( in:name)

• fullname:firstname lastname (fullname: )

• in:email (data in:email)

• GitHub Dorks for Finding Information using Dates

• created:<2012–04–05

• created:>=2011–06–12

• created:2016–02–07 location:iceland

• created:2011–04–06..2013–01–14 in:username

GitHub Dorks for Finding Information using Extension

• extension:pem private

• extension:ppk private

• extension:sql mysql dump

• extension:sql mysql dump password

• extension:json [api.forecast.io] (http://api.forecast.io/)
• extension:json [mongolab.com] (http://mongolab.com/)
• extension:yaml [mongolab.com] (http://mongolab.com/)
• [WFClient] Password= extension:ica

• extension:avastlic “[support.avast.com] (http://support.avast.com/)”
• extension:json googleusercontent client_secret